IBM MQ vulnerabilities

51 known CVE vulnerabilities in IBM MQ, translated and rated.

CVE-2025-36128High
IBM MQ versions 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD are vulnerable to a denial of service caused by improper enforcement of the timeout on individual read operations. A remote attacker could exploit this via slowloris-type attacks to cause a denial of service.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS